Debian Security Advisory DSA-5461-1: Linux Kernel netfilter UAF and AMD Zen Microarchitectural Vulnerabilities Fixed

Vulnerability Overview Vulnerability IDs: CVE-2023-3390, CVE-2023-3610, CVE-2023-20593 Vulnerability Description: - CVE-2023-3390: A use-after-free vulnerability in the netfilter subsystem, which may lead to denial of service or privilege escalation. - CVE-2023-3610: A use-after-free vulnerability in the netfilter subsystem, which may lead to denial of service or privilege escalation. - CVE-2023-20593: A microarchitectural vulnerability in AMD Zen 2+ CPUs, which may lead to information leakage. Scope of Impact Affected System: Linux Kernel Affected CPU: AMD Zen 2+ CPUs Affected Packages: Linux kernel and related packages Remediation Fixed Version: Version 5.10.179-3 in Debian 11 (bullseye) Recommended Actions: - Upgrade the Linux kernel and related packages to the latest versions. - For AMD Zen 2+ CPUs, mitigate the vulnerability by updating microcode or system firmware (BIOS/UEFI). - Note: AMD only provides microcode updates for second-generation EPYC CPUs; updates are not yet available for other Ryzen CPUs. Related Links Debian Security Announcements: https://www.debian.org/security/ Security Tracker: https://security-tracker.debian.org/tracker/linux Additional Information: https://www.debian.org/security/ Mailing List Subscription Address: debian-security-announce@lists.debian.org Signature Information Signer: Salvatore Bonaccorso Sign Date: July 30, 2023 --- Code Block ```plaintext -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Debian Security Advisory DSA-5461-1 https://www.debian.org/security/ July 30, 2023 Package : linux CVE ID : CVE-2023-3390 CVE-2023-3610 CVE-2023-20593 Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2023-3390 A use-after-free flaw in the netfilter subsystem caused by incorrect error path handling may result in denial of service or privilege escalation. CVE-2023-3610 A use-after-free flaw in the netfilter subsystem caused by incorrect refcount handling on the table and chain destroy path may result in denial of service or privilege escalation. CVE-2023-20593 Tavis Ormandy discovered that under specific microarchitectural circumstances, a vector register in AMD "Zen 2+" CPUs may not be written to 0 correctly. This flaw allows an attacker to leak sensitive information across concurrent processes, hyper threads and virtualized guests. For details please refer to and This issue can also be mitigated by a microcode update through the amd64-microcode package or a system firmware (BIOS/UEFI) update. However, the initial microcode release by AMD only provides updates for second generation EPYC CPUs. Various Ryzen CPUs are also affected, but no updates are available yet. For the oldstable distribution (bullseye), these problems have been fixed in version 5.10.179-3. We recommend that you upgrade your Linux packages. For the detailed security status of Linux please refer to its security tracker page at: https://security-tracker.debian.org/tracker/linux Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAaA8Jb8vN9hchUy4bW4b2tQfAeTCC7FfAAAAAAALgk AXNzOW9yY29kZS1rZXk0b2JLZ2VtZ3B1bGRpc05zY2FtZGJhdm9yY29kZS1rZXk0b2JL NzQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZT

Goal Reached Thanks to every supporter — we hit 100%!

Debian Security Advisory DSA-5461-1: Linux Kernel netfilter UAF and AMD Zen Microarchitectural Vulnerabilities Fixed